Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Starkteetje

#56152of 56,330
2.1Total CVSS
Vulnerabilities · 1
PT-2024-15266
2.1
2024-09-02
Secure Systems Engineering · Secure Systems Engineering Connaisseur · CVE-2023-7279
**Name of the Vulnerable Software and Affected Versions** Secure Systems Engineering Connaisseur versions up to 3.3.0 **Description** A vulnerability has been found in Secure Systems Engineering Connaisseur, affecting unknown code of the file connaisseur/res/targets schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high, and the exploitation appears to be difficult. **Recommendations** To address this issue, upgrade to version 3.3.1. As a temporary workaround, consider restricting access to the vulnerable component Delegation Name Handler until a patch is applied. Ensure the affected component is upgraded to mitigate the risk of exploitation.